This vulnerability affects Edimax BR-6675nD firmware version 1.12 in the POST Request Handler component, specifically the formPPPoESetup function. By sending a specially crafted POST request with a manipulated pppUserName parameter, an attacker can trigger a buffer overflow condition. The vulnerability is remotely exploitable without user interaction and requires low privileges, making it a significant risk. The vendor has not issued any advisory or patch, and the exploit is publicly known.

Successful exploitation of this buffer overflow could allow an attacker to execute arbitrary code on the affected device remotely, potentially leading to full device compromise. Given the high CVSS score (8.7) and the availability of public exploit code, this vulnerability poses a serious risk to affected devices. No known exploits in the wild have been reported yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or provided a patch, users should consider mitigating exposure by disabling remote management features if possible, restricting network access to the device, or replacing the device with a non-vulnerable model until an official fix is available.